Dealing with MacOS Catalina Notary Service

[russorat]

We need to figure out how to handle the MacOS notary service that causes our binaries to be untrusted.

some info from how Go is dealing with it: golang/go#34986

Open to suggestions on how we should handle this.

[russorat]

go1.14 will allow us to fix this

[russorat]

still an issue:

[russorat]

still an issue:

[danxmoran]

influxdata/telegraf#8878 shows how the telegraf team set this up in their project.

Now that we've split up our build process, it should be possible to create a new CI job to sign the mac binary that runs between the mac build and the final package-and-upload step.